asked on
the system administrator has set policies to prevent this installation
hi i am getting ready to upgrade my win 2003 domain to a win 2008 domain but have one issue i cannot seem to resolve.
i am running a 'ris server' with multiple xp images ok.
i have also now created an image via 'risetup.exe' onto my ris server just like i did with with 1st xp flat image.
the issue i have is that i 'pre-staged' a machine by adding the 'hostname & mac address' via my master dc aduc.
i then successfully received my win 2003 image installed onto my secondary domain member server.
when i logged on, it only allowed me to logon to the domain and 'no local user account was created' which was expected.
i then attempted to install sp2 but this would not install showing the below:
"you do not have permission to update win server 2003"
i decided to create a local 'admin' account and then logged on locally & installed sp2 successfully
i then logged onto the secondary domain member server and attempted to install 'isa 2006', but it prompts a message:
" is that after installing 'win 2003' image onto another server"
note: as i am not using 3rd party software there was no requirement to use: sysprep in order to select 'generalize' - as advised previously.
so have used 'riprep.exe' for my xp.
question 1. does anyone know if there is a way to resolve this as i have tried 'delegation, batch job, service, via my gpo and that appears not to resolve my issue ?
possible resolution:
it maybe the proper way but i am not sure, so i was thinking about 'not pre-staging' my win 2003 domain member server and just installing and adding a new name later, to see if that rectifies my problem - but i have not tried that yet ?
i am running a 'ris server' with multiple xp images ok.
i have also now created an image via 'risetup.exe' onto my ris server just like i did with with 1st xp flat image.
the issue i have is that i 'pre-staged' a machine by adding the 'hostname & mac address' via my master dc aduc.
i then successfully received my win 2003 image installed onto my secondary domain member server.
when i logged on, it only allowed me to logon to the domain and 'no local user account was created' which was expected.
i then attempted to install sp2 but this would not install showing the below:
"you do not have permission to update win server 2003"
i decided to create a local 'admin' account and then logged on locally & installed sp2 successfully
i then logged onto the secondary domain member server and attempted to install 'isa 2006', but it prompts a message:
" is that after installing 'win 2003' image onto another server"
note: as i am not using 3rd party software there was no requirement to use: sysprep in order to select 'generalize' - as advised previously.
so have used 'riprep.exe' for my xp.
question 1. does anyone know if there is a way to resolve this as i have tried 'delegation, batch job, service, via my gpo and that appears not to resolve my issue ?
possible resolution:
it maybe the proper way but i am not sure, so i was thinking about 'not pre-staging' my win 2003 domain member server and just installing and adding a new name later, to see if that rectifies my problem - but i have not tried that yet ?
Windows Server 2008Windows Server 2003
Last Comment
mikey250
ASKER CERTIFIED SOLUTION
THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
SOLUTION
THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
ASKER
hi i only installed via ris image win 2003 & attempted to install 'win 2003 sp2 manually & then isa 2006 manually & not via gpo\computer config\software installation\ for isa 2006.
if 'pre-staging' is good, what do i do to resolve the issue i have ?
if 'pre-staging' is good, what do i do to resolve the issue i have ?
SOLUTION
THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
ASKER
currently i am only using 'administrator domain' account for everything & yes my 'isa 2006 firewall' is in an 'ou/gpo' for 'windows updates' etc via gpo\computer config & user config - only, so everything is syncing.
SOLUTION
THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
ASKER
what i have been doing is installing image successfully, which locates by default the computer in the computer container via aduc and then logging on master dc 'aduc' and 'moving' isa 2006 to 'ou'
so are you saying install image & sp2 in aduc computer container & then 'move' to 'ou' & install 'isa' manually as usual ?
so are you saying install image & sp2 in aduc computer container & then 'move' to 'ou' & install 'isa' manually as usual ?
Right
ASKER
ok, i might give that ago tomorrow because as i mentioned earlier i have currently 'deleted' the 'pre-staging' and installed image without 'pre-staging' so once i have confirmed i can install 'isa' as expected i will 'pre-stage' again and take your advice as it is good to know.
if it fails, any other suggestions, or maybe i should install, image & sp2 & isa in the aduc computer container 1st then 'move' to specific 'ou' ?
if it fails, any other suggestions, or maybe i should install, image & sp2 & isa in the aduc computer container 1st then 'move' to specific 'ou' ?
SOLUTION
THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
ASKER
yes i realise ris is a convenient solution for deploying client os, but just wanted to know how to do it and then that was the end of the task as i already have all my xp images located on my ris server.
once done i can eventually upgrade to wds and move master dc to win 2008.
appreciated for that advice and will let you know sometime tomorrow.
once done i can eventually upgrade to wds and move master dc to win 2008.
appreciated for that advice and will let you know sometime tomorrow.
ASKER
thanks for the advice.
note: i am aware i could have used the 'setup manager' to do the below but thought i would try the below:
i just assumed that if i wish to take control of machines i thought 'pre-staging' was one method of doing things but did not realise the issue i would have via domain admin account installing sp2 and did not realise the issue via the domain admin account when installing isa 2006 receiving the below message:
"the system administrator has set policies to prevent this installation"
i would like to know if the above can be put right, unless there was a specific 'update' to fix those issues above.
as a way round i have i have now removed the server from the domain although i had to logon locally to do that as when logged onto the domain, it would not allow me to do that due to it also being dimmed out.
so i have now rebooted the server and just completed a new image install without using the 'pre-staged' functionality and i have also attempted to install isa 2006 which all appears ok. so i am now continuing to install sp2 before i do install isa 2006.